Nexus port-profile

Nexus port-profile
Port-profile is the way to configure the configuration
template and to apply configuration on the multiple interfaces at the same
time.

The entire configuration is done under port-profile and
it gets replicated on the interfaces as soon as port-profile is mapped to the
interface. All the configuration changes in port-profile will be replicated in the
interface. It is not an initial template but an updating template which always
attached to the interface.

Port-profile is used when the same configuration needs to
be done on many interfaces.

There are below types of Port-profiles:-

  •    Ethernet:
    –
    It is used when port-profile applied on the physical interfaces.
  •    Port-channel:-
    Used in case of port-channel
  •    Interface-vlan:
    – When port-profile is applied on the SVI.



Below is the process used to configure and apply the
port-profiles:-


Step1. Create
the port-profile based on the type of interface it is getting mapped. There are
four types of port-profile like Ethernet, interface-vlan, port-channel and
tunnel-te.

Note:- Ethernet
is the default port-profile.


N7K-1(config)# port-profile type ?
  ethernet        Ethernet type  ———-<<<<<<
Default
 
interface-vlan  Interface-vlan
type
 
port-channel    Port-channel
type
  tunnel-te       Tunnel-te type

N7K-1(config)# port-profile test
N7K-1# sh run port-profile test

!Command: show running-config port-profile test
!Time: Wed Sep 17 18:46:58 2014

version 5.2(1)
port-profile type ethernet test  ————<<<<<<Default


Step2. Configure
the port-profile as per the requirement.

Note: – Please keep in mind port-profile name is case
sensitive. It can be seen that same name with different case, will create two
different port-profiles.



N7K-1(config)# port-profile type ethernet Access_PORT
N7K-1(config-port-prof)# switchport mode access
N7K-1(config-port-prof)# switchport access vlan 100
N7K-1(config-port-prof)# spanning-tree port type
edge

N7K-1(config)# port-profile type ethernet ACCESS_PORT
N7K-1(config-port-prof)# switchport
N7K-1(config-port-prof)#   switchport mode access
N7K-1(config-port-prof)#   switchport access vlan 100
N7K-1(config-port-prof)#   spanning-tree port type edge

N7K-1(config)# sh run port-profile
!Command: show running-config port-profile
!Time: Wed Sep 17 16:49:36 2014

version 5.2(1)
port-profile type ethernet Access_PORT
  switchport
  switchport mode
access
  switchport
access vlan 100
  spanning-tree
port type edge

port-profile type ethernet ACCESS_PORT
  switchport
  switchport mode
access
  switchport
access vlan 100
  spanning-tree
port type edge



Step 3. Verify
the port-profile configuration.


N7K-1(config)# sh run port-profile
port-profile type ethernet ACCESS_PORT
  switchport
  switchport mode
access
  switchport
access vlan 100
  spanning-tree
port type edge


Step4. Once
the configuration verification is done, enable the port profile.


N7K-1(config)# port-profile type ethernet
ACCESS_PORT
N7K-1(config-port-prof)#   state enabled
N7K-1(config-port-prof)# exit


Step5. Apply
port-profile on the physical interface which inherits the configuration of
port-profile.


N7K-1(config)#Interface Eth1/1
N7K-1(config)#inherit port-profile ACCESS_PORT




N7K-1(config)# int eth1/21
N7K-1(config-if)# inherit port-profile access_port
ERROR: No profile matching given profile name
– – – <<This error is encountered when the port-profile name give is not
correct or with different case.


Step6.  Show run interface command will not show the
complete switchport configuration as shown below.


N7K-1(config)# sh run int eth1/21
!Command: show running-config interface Ethernet1/21
!Time: Wed Sep 17 16:51:12 2014
version 5.2(1)
interface Ethernet1/21
  inherit
port-profile ACCESS_PORT


Use the below command to check the entire configuration
associated to the switchport:-


N7K-1(config)# sh port-profile expand-interface name
ACCESS_PORT

port-profile ACCESS_PORT
 Ethernet1/21
  switchport
  switchport mode
access
  switchport
access vlan 100
  spanning-tree
port type edge


Step7.  Below command can be used to find what all interfaces
as well as configuration associated to the port-profiles.


N7K-1# show port-profile name ACCESS_PORT

port-profile ACCESS_PORT
 type: Ethernet
 description:
 status: enabled
 max-ports: 512  ———————–<<<<<<<<<<<<<<
 inherit:
 config
attributes:  ————<<<<<<<<<<<<<<<<<<<<<
  switchport
  switchport mode
access
  switchport
access vlan 100
  spanning-tree
port type edge
 evaluated config
attributes:
  switchport
  switchport mode
access
  switchport
access vlan 100
  spanning-tree
port type edge
 assigned
interfaces:
  Ethernet1/21  ——————<<<<<<<<<<<<<<<<<<<<


Step8. Configuration
done on the interface will take preference over the port-profile.

In the below output, Eth1/21 is configured as trunk which
override the access port configuration in the port-profile.


N7K-1(config)# 
int eth1/21
N7K-1(config-if)# switchport mode trunk
N7K-1(config-if)# end

N7K-1# sh run int eth1/21

!Command: show running-config interface Ethernet1/21
!Time: Wed Sep 17 19:03:34 2014

version 5.2(1)

interface Ethernet1/21
  inherit
port-profile ACCESS_PORT
  switchport mode
trunk

N7K-1# sh int eth1/21 switchport
vdc 4 vlan 100Name: Ethernet1/21
  Switchport:
Enabled
  Switchport
Monitor: Not enabled
  Operational
Mode: trunk  —————<<<<<<<<<<<<<<
  Access Mode
VLAN: 100 (Vlan not created)
  Trunking Native
Mode VLAN: 1 (default)
  Trunking VLANs
Allowed: 1-4094
  FabricPath
Topology List Allowed: 0
  Administrative
private-vlan primary host-association: none
  Administrative
private-vlan secondary host-association: none
  Administrative
private-vlan primary mapping: none
  Administrative
private-vlan secondary mapping: none
  Administrative
private-vlan trunk native VLAN: none
  Administrative
private-vlan trunk encapsulation: dot1q
  Administrative
private-vlan trunk normal VLANs: none
  Administrative
private-vlan trunk


Step9. NO command is used to delete the
port-profile. It also deletes the entire port-profile related configuration
from the switchport whereas the configuration done inside the interface will
not be removed.


N7K-1(config)# no port-profile ACCESS_PORT
Profile is applied on some interfaces. Do you want to
continue (y/n)? [n] y

N7K-1(config)#sh run int eth1/21

!Command: show running-config interface Ethernet1/21
!Time: Wed Sep 17 19:08:33 2014
version 5.2(1)

interface Ethernet1/21